Privacy policy
Last updated: 25 August 2026
The Grapple Mill (“we”, “us”) is the data controller for personal information collected through this website and our drop-in booking flow. If you have questions, contact us at thegrapplemill@gmail.com.
Drop-in bookings
When you book a drop-in session online, we ask for:
- Attendee name — so coaches know who is on the mat
- Email — booking confirmation and contact about your session
- Phone — urgent contact if a session changes or for safety on the day
We use this information to:
- Register you on the roster for the session you paid for
- Process your payment through Stripe (they handle card details — we do not store them)
- Contact you about that booking if needed
- Maintain attendance records for gym operations
Legal basis: performance of a contract (your booking) and our legitimate interest in running classes safely.
Refunds: if you need to cancel, we can refund your payment when you cancel more than 24 hours before the session start time. Bookings cancelled within 24 hours of the session are non-refundable.
Who we share data with
- Stripe — payment processing (Stripe privacy policy)
- Our coaches and admin staff — roster and attendance for the session you attend
- Service providers — secure hosting (e.g. AWS) that store booking records on our behalf
We do not sell your personal data.
How long we keep it
Drop-in booking records (name, email, phone, session, payment reference) are kept for as long as needed to manage attendance, resolve disputes, and meet accounting requirements — typically up to six years for payment-related records.
Your rights
Under UK GDPR you can ask us to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete data where we no longer need it (subject to legal retention)
- Object to or restrict certain processing
Email thegrapplemill@gmail.com to exercise these rights. You can also complain to the ICO (ico.org.uk).
Website enquiries
If you contact us by email, phone, or WhatsApp from this site, we use your details only to respond to your enquiry and follow up about classes or trials.
Cookies & analytics
This marketing site may use basic analytics (e.g. Google Analytics) to understand traffic. Drop-in checkout runs on Stripe’s pages, which have their own cookies and privacy terms.